Articles in this section

SAML for JustLogin Using Google Workspace (SSO Login)

SAML (Security Assertion Markup Language) is an authentication standard that lets your employees sign in to JustLogin β€” and other business applications β€” using a single set of credentials managed by your company's Identity Provider. With Google Workspace as your Identity Provider, users can click the JustLogin icon from their Google app drawer and be logged in automatically, with no separate username or password required.

This guide walks through two major steps that must both be completed for SSO to work:

  1. Part 1 – Enable and configure SAML on the JustLogin side (Service Provider).
  2. Part 2 – Create and configure the JustLogin SAML app in Google Workspace (Identity Provider).

Key Terms

Term Description Example
Identity Provider (IdP) Stores and authenticates user credentials, then sends verified identity data to the Service Provider. Google Workspace, Microsoft Azure AD
Service Provider (SP) The application users want to access; relies on the IdP to confirm identity. JustLogin, Salesforce, Dropbox

Important: For SAML to work, every user's JustLogin username must be their email address. This is the only unique identifier the system accepts. If you need help updating usernames, contact support@justlogin.com.

Part 1 – Enabling SAML on JustLogin (Service Provider)

Complete these steps first to generate the SP details you will need in Part 2.

  1. Log in to your JustLogin account.
  2. Go to UserAdmin.
    UserAdmin navigation
  3. Click the Settings tab tab at the top of the page.
  4. Select the SSO sub-tab.
    SSO sub-tab
  5. The SAML/SSO setup page will appear:
    SAML SSO setup page
  6. Toggle the slider to enable SAML. Enable SAML toggle
  7. The left column contains your Service Provider (SP) details β€” these are pre-filled automatically and do not need to be edited. Keep this page open; you will copy values from it in Part 2.
    SP details pre-filled
  8. The right column requires Identity Provider (IdP) data from Google Workspace. You will complete these fields in the steps below after retrieving the information from Google Workspace.
    IdP fields to complete

Tip: Keep the JustLogin SSO setup page open in a separate browser tab while you complete Part 2 β€” you will need to switch back and forth between JustLogin and the Google Workspace Admin console.

Part 2 – Setting Up JustLogin as a SAML App in Google Workspace

Step A: Create the Custom SAML App in Google Workspace

  1. Log in to admin.google.com. You must be a Google Workspace administrator for your organisation.
    Google Workspace Admin console home
  2. Click the menu icon in the upper-left corner.
    Menu icon
  3. Navigate to Apps > SAML apps.
    Apps then SAML apps menu
  4. Click Add App.
    Add App button
  5. Select Add custom SAML app from the dropdown.
    Add custom SAML app option
  6. Fill in the app details:

    • App Name – Enter JustLogin.
    • App Icon – Optionally upload the JustLogin logo.

    App name and icon fields

  7. Click Continue.
    Continue button

Step B: Copy IdP Details from Google Workspace into JustLogin

The next page displays your Google Workspace IdP details. You need to copy these into the right column of the JustLogin SSO setup page (Part 1, Step 8).

Google IdP details page

  1. Click the copy icon next to the SSO URL and paste it into the corresponding field in JustLogin.
    Copy SSO URL
  2. Click the download icon to download the IdP certificate.
    Download certificate
  3. Switch back to the JustLogin SSO setup page (Part 1, Steps 1–5 to navigate there if needed).
    JustLogin SSO setup page
  4. Paste the SSO URL you copied into the appropriate fields.
    Paste SSO URL into JustLogin
  5. Click the certificate upload box and upload the certificate you downloaded from Google Workspace.
    Upload certificate field

    Note: If the downloaded certificate file has a .pem extension, rename it to .cer before uploading.

  6. A confirmation message will appear once the certificate is successfully uploaded.
    Certificate upload success message
  7. Click Save button to save your JustLogin SAML configuration. The JustLogin side of the setup is now complete.

Step C: Enter JustLogin SP Details into Google Workspace

Return to the Google Workspace Admin console to finish the configuration there.

  1. On the Add SAML app page in Google Workspace, click Continue.
    Continue on Add SAML app page
  2. The next page asks for your Service Provider details from JustLogin.
    SP details fields in Google Workspace
  3. For the Entity ID field, copy the value from the JustLogin SSO setup page:
    Copy from JustLogin:
    Entity ID in JustLogin
    Paste into Google Workspace:
    Entity ID field in Google Workspace
  4. For the ACS URL field, copy the value from the JustLogin SSO setup page:
    Copy from JustLogin:
    ACS URL in JustLogin
    Paste into Google Workspace:
    ACS URL field in Google Workspace
  5. All remaining fields on this page are optional and can be left blank.
    Optional fields
  6. Click Continue button.
  7. On the next page, click Finish button to complete the app creation.

Step D: Enable the JustLogin App for Your Users

JustLogin will now appear in your list of SAML apps, but user access is set to OFF for everyone by default. You must enable it before your employees can use SSO.

JustLogin SAML app listed with access off

  1. Click the JustLogin app entry JustLogin app entry.
  2. The User Access panel will open.
    User access panel
  3. Click View Details.
    View Details link
  4. Select ON for everyone (or limit to specific organisational units if preferred).
    ON for everyone option
  5. Click Save button to apply the change.

What Your Employees Will Experience

Once the setup is complete and user access is enabled, employees will see the JustLogin icon in their Google app drawer.

JustLogin icon in Google app drawer

Clicking the JustLogin icon will open JustLogin in a new browser tab and log the user in automatically β€” no separate username or password entry is needed.

Need help? If you encounter any issues during setup, contact our support team at support@justlogin.com.

Was this article helpful?
2 out of 3 found this helpful